Abstract: To enable formation of secure associations between IP-enabled devices when they have not previously connected, a method is proposed where a declaration of ownership of a target device is made by the subscriber of a originating device and that subscriber giving that declaration is authenticated by means of a SIM card, say. The originating device establishes secure connection to a first server. The target device establishes a secure connection to a second server. Provided the first and second servers can establish a conventional IP-type SA (e.g. using IPSec or TLS), there is a chain of secure associations between the two devices. This chain is then used to build a new secure association between originating device and target Device. The first and second servers thus act as proxies for two devices respectively and negotiate the secure association on their behalf. They then transfer the new secure association information securely to the devices using the existing chain of secure associations.

Abstract: Disclosed is a verification method comprising reception of a registration request at a multimedia IP network core, the registration request containing a public identity of a user. The method also comprises interrogation of a user data server of the network core, comprising the transmission of a check request to the user data server in order to check a user's right to be registered with the registration server, the check request containing the public identity and a private identity. The method may be carried out by an interrogation server located upstream of the registration server. In addition, a piece of information is inserted by the interrogation server into the check request before it is sent to the user data server, the piece of information indicating if the private identity has been generated by the entity or received in the registration request.

Abstract: A personal computing device, server or other type of processing device authenticates a user attempting to access a protected resource by verifying user knowledge of one or more extracted characteristics of stored information indicative of an internal operating state of that resource. The one or more extracted characteristics are characteristics that would likely be known to the user if that user had made one or more previous authenticated accesses to the protected resource. For example, the extracted characteristics may be indicative of a manner in which the user had utilized the protected resource during the one or more previous authenticated accesses to the protected resource. The processing device receives input from the user regarding the one or more extracted characteristics, and grants or denies access to the protected resource based at least in part on the input received from the user.

Abstract: Various examples are directed to machines and methods for disassembling and reassembling data structures. An ordered set of functions may be applied to a data array comprising a plurality of data units, each associated with a unique coordinate set. Data units returned by the ordered set of functions may be written in order to one or more disassembled data containers.

Abstract: Embodiments are directed to systems, methods and computer program products for assigning a level of authentication to an authentication bucket. Embodiments determine a current level of authentication corresponding to a first authentication bucket comprising a plurality of mobile banking functions; collect a set of circumstantial data corresponding with the apparatus; determine a circumstances score based at least in part on the set of circumstantial data; and determine whether the current level of authentication corresponding to the first authentication bucket is appropriate based at least in part on the circumstances score.

Abstract: This invention discloses a cookie information sharing method that comprises the following steps: reading cookie information in a parent browser, said parent browser being a browser which stores the cookie information; importing the cookie information read from the parent browser into a child browser, said child browser being a browser which needs to acquiring the cookie information from the parent browser. This application also provides a cookie information sharing system for realizing the proceeding method. The cookie information sharing method and system of this application are able to reduce occupancy of system resources by user's information records, and also to realize sharing of the user's information records.

Abstract: Apparatus and methods for control of bandwidth reclamation in a content distribution network. In one embodiment, the invention provides a network operator or subscriber with the ability to disable or otherwise control reclamation in a switched digital video (SDV) network. A controller uses rules in determining whether to reclaim bandwidth. These rules designate certain carriers, content, devices and/or subscribers as high priority (or protected from reclamation). In one variant, the rules determine which subscribers are queried (“pinged”) in order to evaluate whether delivered content is actually being utilized by these subscribers. Alternatively, selected ones of the devices are configured so as to generate an automatic response to any ping messages. In another variant, the rules for disabling bandwidth reclamation are entered via user interaction with an application running on a client device and in communication with the controller via a network proxy, or with the SDV server directly.

Abstract: A method detects unauthorized access of data, and includes receiving data from a content provider by a content reproducing device; storing the received data in a memory storage device of the content reproducing device; obtaining an address range of a buffer of the content reproducing device; intercepting system application programming interface calls related to memory access of the address range of the buffer; comparing the intercepted system application programming interface calls to an expected sequence of memory access calls; and determining that a particular memory access call is unauthorized when the particular memory access call accesses the address range of the buffer while not belonging to the expected sequence of memory access calls.

Abstract: A content analyzer retrieves content items from one or more content sources. The content items have a corresponding date and time assigned representing when the content item was published. The content analyzer is further configured to determine a frequency count for each of a plurality of terms within the plurality of content items for a specified time period. In some embodiments, the content analyzer identifies a change in the frequency count for each of the plurality of terms relative to a respective baseline frequency count for the respective one of the plurality of terms. In some embodiments, a report representing the change in the frequency count for each of the plurality of terms is generated.

Abstract: A method of converting an original application into a cloud-hosted application includes splitting the original application into a plurality of application components along security relevant boundaries, mapping the application components to hosting infrastructure boundaries, and using a mechanism to enforce a privacy policy of a user. The mapping may include assigning each application component to a distinct virtual machine, which acts as a container for its assigned component.

Abstract: A management server includes a user management database in which mobile terminal identification information on the mobile terminal and working machine identification information on a sold working machine are registered in association with each other, a user registration determination unit adapted to determine whether or not the mobile terminal and the working machine are registered in association with each other on the basis of the mobile terminal identification information and the working machine identification information outputted from the mobile terminal and the mobile terminal identification information and the working machine identification information stored in the user management database, and an authorization information output unit adapted to output an authorization key necessary for wireless communication between the mobile terminal and the working machine in the case where the user registration determination unit determines that the mobile terminal and the working machine are registered in associa

Abstract: The present invention relates to a system and method for facilitating access to secure network sites, such as sites providing secure financial information. An active software agent is utilized to fetch passwords and user identifiers from a user computing system and to use the passwords and identifiers to extract required information from the secure site. The password sites and identifiers are encrypted and an encryption key is stored at a network mode remote from the user's computer and is fetched in order to enable the passwords and identifiers to be decrypted so that the active agent can use them to obtain the required information.

Abstract: A system of tracking rate of change of social network activity associated with a digital object includes a change measurement module in communication with at least one social network database and a ranking module in communication with the change measurement module. The change measurement module measures a change in the level of social network activity associated with the digital object based on a first object value and a second object value. The first object value is based on a measurement of activity associated with the digital object in at least one social network at a first time, and the second object value is based on a measurement of activity at a second time. The ranking module ranks the digital object relative to at least one other digital object based on a score derived from a rate of change in social network activity.

Abstract: Systems, methods, apparatus, and articles of manufacture to facilitate configuration and naming of a multimedia playback device on a local playback network are disclosed. An example method includes identifying and analyzing local network topology to identify playback device(s) connected to the network at location(s). The example method includes analyzing a playback device to be added and comparing the playback device to be added to the playback device(s) already connected to the network. The example method includes displaying available option(s) to name the playback device to be added based on the analysis of the network, the already connected playback device(s) and the playback device to be added to the network. The example method includes naming the playback device to be added based on a selected available option.

Abstract: Active memory for managing network telemetry information, or other types of information stored as objects, has objects partially-serialized to allow greater amounts of information to store in a memory of a given size with slightly increased retrieval times. Storing additional information in an active memory provides an overall increase in network security platform responsiveness by allowing a greater amount of information to be accessible from the active memory instead of archive.

Abstract: e and n are public information and d is private information. An electronic signature is generated based on a calculated value of e×d mod n. A signature generation apparatus includes a random number generation unit, a first calculation unit, a second calculation unit, and a signature generation unit. The random number generation unit generates a random number r. The first calculation unit calculates s1=r×n. The second calculation unit calculates s2=s1+e. The signature generation unit calculates s3=s2×d mod n and outputs s3 as the calculated value of e×d mod n. The signature generation apparatus can thereby generate the above electronic signature securely against differential power attacks.

Abstract: A method begins by first and second client devices transmitting first and second sets of write requests to storage units. The method continues with a storage unit sending a write response message to the first and second client devices, where the write response message indicates a storage unit score value for one of the client devices. The method continues with the first and second client devices interpreting the storage unit score values from the storage units to determine which client device has write priority. The method continues with the client device that has the write priority sending a set of next-phase write requests to the storage units. The method continues with the other client device that does not have the write priority sending a set of rollback requests to the storage units.

Abstract: A computing system can include an interface that receives a URL where the URL includes activation information associated with activation of an Internet link by a user and item information associated with an item where the item information is associated with an ID for the item; circuitry that determines if the ID identifies the item at an Internet store; circuitry that determines via decay logic a best match for the item at the Internet store if the ID does not identify the item at the Internet store; and circuitry that formulates a redirection URL for redirection of the user to a webpage of the Internet store for the best match for the item if the ID does not identify the item at the Internet store.

Abstract: A system and method are provided for enabling access to presence status for mobile devices. The method comprises receiving, via an application programming interface, an application inquiry, the application inquiry requesting a presence data for at least one mobile device; responsive to receiving said inquiry, obtaining network data from one or more network infrastructure nodes associated with providing service to the at least one mobile device; determining a response to the application inquiry based upon the network data; and providing the response via the application programming interface.

Abstract: A system and method are provided for enabling access to presence status for mobile devices. The method comprises receiving, via an application programming interface, a subscription request, the subscription request requesting a presence data for at least one mobile device; registering a subscription for a subscriber device according to the subscription request; obtaining network data from one or more network infrastructure nodes associated with providing service to the at least one mobile device; determining that at least a portion of the network data is associated with the subscription; and providing the at least a portion of the network data to the subscriber device via the application programming interface.